Privacy
This notice covers the website mallorcathegame.com and the game Mallorca: The Game. It follows the in-game notice dated October 2026 (version 1.1) for the game, and it adds how this website behaves. It is not a lawyer’s sign-off.
Who is responsible
Regio hoch.drei UG (haftungsbeschränkt), Obere Kirchgasse 12, 97318 Kitzingen, Germany. Managing director: Catalin Marin. Email for this game: info@regio-hochdrei.de.
This website
The marketing site is a set of static pages. It does not run advertising. It does not set tracking cookies. On the first visit a cookie notice appears. Your choice is stored on the device under the key mtg-cookie-consent so the notice does not return. It is not sent to us. Analytics loads only if you choose Accept all and a measurement ID is set in the build. The current public configuration has no measurement ID, so no analytics request is sent even after you agree.
The host that will serve the site may write technical connection logs, such as IP address, user agent, and the page requested. The host is not chosen on this page yet. Until it is, those logs and their retention are not something this notice can honestly pin to a named processor. When a host is fixed, this section should name it. See cookie settings for the categories that exist today.
If a measurement ID is later configured at build time, analytics will load only after you opt in. That ID is empty in the current build, so no such request is made.
The game, on the device
Progress is stored first on the device. The save includes the character and industry you chose, cash and businesses, the softer currencies, and settings such as sound, haptics, and language.
An anonymous Firebase account is created for the cloud save and the island league. No email account is required. The save is stored under that account ID. In the league, other signed-in players can see the display name you choose, your participation that week, and the result. Your full save stays private.
Purchases, ads, and optional push
Purchases go through Apple or Google. The publisher does not receive your payment-card data. AdMob and Google Mobile Ads may use advertising identifiers according to the consent you give in the app. Personalised ads are used only with that consent.
Island news by push is optional and separate from ad consent. If you agree in the app, a push token, your anonymous account ID, the app language, and the fact that you agreed — including the wording version and the time — are stored. Apple Push Notification service and Firebase Cloud Messaging deliver the messages. The game is fully usable without this. Turning the setting off deletes the token record from the publisher’s database. A copy can remain at Apple or Google under their own retention. A message the push service has already accepted cannot reliably be recalled. Campaign send logs keep an id, the language, the result, and the service message id so a message is not sent twice. Those logs do not store the token.
Purposes and legal bases
- Running the game, the anonymous cloud save, and the island league — Art. 6 (1) (b) GDPR.
- Purchases and restore — Art. 6 (1) (b) GDPR.
- Personalised advertising only with consent — Art. 6 (1) (a) GDPR.
- Optional game news, offers, and island reminders by push, only after a separate in-app choice — Art. 6 (1) (a) GDPR.
- Serving this website and remembering the cookie choice on your device — Art. 6 (1) (f) GDPR. Optional analytics only with consent, Art. 6 (1) (a) GDPR, and only when a measurement service is configured.
Recipients
Apple and Google for the stores. Google for ads and consent, for the anonymous Firebase account, the cloud save, the island league and, if you opt in, Firebase Cloud Messaging. Apple’s push service only if you opt in to push. For transfers to third countries, including the United States, Standard Contractual Clauses or other GDPR mechanisms may apply. This website does not add a further analytics or marketing recipient in the current build.
How long data stays
The local save stays until you delete it in Settings or uninstall the app. Cloud save and league data stay while the anonymous account exists. Purchase status stays as long as the contract and the store rules require. Ad and consent data follow Google’s UMP and AdMob policies. The push token stays while island news is on, and is deleted from the publisher’s database when you turn it off or the anonymous account is deleted. The cookie choice on this website stays in the browser until you clear the site data.
Your rights
You can ask for access, rectification, erasure, restriction, portability, and you can object, under the GDPR. You can complain to a data-protection authority. For the publisher, that includes the Bavarian authority. In the game: delete the save in Settings, adjust ads via ad settings, turn off island news for push, and manage purchases in the store. For this website, clear the site data in your browser. Write to info@regio-hochdrei.de if you want to exercise a right against the publisher. Please name the game in the subject.
The Play Console data-safety form and this notice should describe the same practices. If they diverge, this notice and the in-game text are the ones written for players. A form that says nothing is collected would be incomplete for a game that uses Firebase, ads, and a guest account.